
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File: KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier: 8WFcsA5VI45jq9xnSMXBOQNKgxw2eSYCEeJhBR+zsKM=
Subject key identifier: 7A:BE:7A:AC:0E:C4:69:92:17:ED:35:61:30:41:18:0D:1B:60:1F:8B
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 0194BCA9CCC49F6C16692C92644740A1AA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 8EzVvdqmnyUUlh032i_MVZutQmM.roa (hash: Y0OSVWz+Kd1Sv3rConcDjABoFQUY9BXVpm1Sb1N4NUM=)
2: AfbOEK2Wm_yxkXpDRuaaK0yepic.roa (hash: ylTbU6i+mICebl27vpw8wdGnWyWsjN4+lLcu4NPOkSU=)
3: F22dqci9sETpBxI71_zF8Iz2jLY.roa (hash: u1ifxP2pZLgjnEg+EL5SHToHcyGG9LmZXTUGx5mHKTM=)
4: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: DRPqMOt7pel8K4z9piRaxUss5z8rcT6sPYLqSwlzHJo=)
5: MWXFWupmeH0x6eo-nSAsEyxsUK4.roa (hash: FcrTWOvQwbii+S/ULF+HgAsrIKV1okSCxZzQQr84deE=)
6: iWBAR1OSSXBoMflzHe0qbIrF3FU.roa (hash: rpKSuxScT2SachfPDTxZm8SPZLmo9ym/QvFcyjf38Z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:c4:9f:6c:16:69:2c:92:64:47:40:a1:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=7abe7aac0ec4699217ed35613041180d1b601f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:1c:d8:4c:4b:97:d6:81:0d:a8:02:21:7d:
96:3e:07:ca:e9:62:c8:2c:c0:9d:7f:07:44:1b:54:
85:b6:9e:63:c3:94:64:26:b7:ef:f6:c0:9e:a0:6c:
4d:4a:f4:d6:ab:a2:c4:3d:a4:8f:81:94:2f:0e:eb:
5c:c4:8b:19:ce:99:ec:71:c4:4c:2e:65:46:b6:f4:
9e:12:99:44:56:5a:38:f2:80:0a:8e:af:11:ec:39:
68:9e:0d:09:67:19:d1:2e:2f:a2:4f:a6:b3:2c:f3:
e2:19:84:66:42:fb:58:33:20:e8:2b:3c:f4:07:8f:
84:c6:d1:0a:94:1e:0f:0f:63:9b:23:d2:5e:1b:1a:
9d:29:19:58:d5:fc:2f:a8:b0:e2:f4:e9:e1:0b:e3:
3d:ca:e1:fc:39:59:47:70:2d:d9:d4:56:9a:d7:70:
89:d2:7d:24:18:1b:e5:e0:cb:3a:6f:ce:fc:d4:11:
3f:72:16:af:aa:7f:d9:fe:cd:b2:cf:81:0f:c1:42:
2f:96:4b:70:ea:1e:7d:48:87:0c:3b:84:35:db:c3:
7e:bf:54:a9:aa:eb:bc:0d:b7:b3:4d:45:b8:56:02:
d5:19:87:c2:55:41:94:58:ec:1f:40:ce:20:c5:d5:
11:78:ff:8e:25:f8:20:b1:d6:e9:cf:ff:9f:0f:13:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:7A:AC:0E:C4:69:92:17:ED:35:61:30:41:18:0D:1B:60:1F:8B
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:ec:65:fd:81:53:9c:3e:ee:db:95:bd:a7:01:34:91:0d:
50:33:85:99:6a:fd:2a:20:b2:c2:2b:4e:b1:04:b1:97:0a:56:
73:a1:43:28:35:17:54:09:ef:ce:fe:f2:b1:11:74:d1:fe:14:
35:22:3c:3e:31:ee:f2:f4:74:c2:51:a6:cb:1c:d2:3c:e6:c9:
d6:cf:4b:0d:13:c4:75:26:ac:f4:48:70:b1:c9:fb:66:c6:da:
3b:cb:e7:46:f8:75:8e:45:da:45:40:0f:3e:ad:b7:f0:b3:9b:
c4:06:c8:0b:60:f2:05:7b:97:12:b6:2c:4e:a0:97:46:8b:99:
9c:9c:a6:32:4a:4c:c0:f3:1a:ab:99:9c:de:6e:d0:e8:e2:ef:
76:97:3d:f2:62:d5:0f:78:74:34:23:bd:79:d2:b4:10:35:a3:
8b:6f:0a:23:81:75:7e:5c:4b:7d:0f:52:01:d6:80:98:23:0d:
6c:cb:ac:ba:f8:e7:0e:a1:95:38:13:6e:70:42:5f:a5:bc:12:
48:db:65:cb:58:7f:66:b8:3f:b9:a2:54:ca:90:d0:fe:7c:10:
3a:09:f3:71:4b:7d:5e:db:1e:28:23:64:e0:5b:73:e6:ad:c4:
46:d4:01:ea:b3:c0:38:ef:49:1c:35:f4:6b:ee:30:52:e4:a4:
18:3f:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:11 2025 by rpki-client